Privacy Policy
Last updated: July 2026
Guardian Accounts & Managed Student Profiles
Accounts are registered and operated by guardians aged 18 or older. A guardian may create a managed student profile for their minor child and provides consent for that profile's data processing — the age and guardianship attestation recorded at registration is the record of that consent, retained immutably (append-only consent events). Student-profile data is limited to: display name, learning progress, practice records, and work products/recordings (where the speaking features are used). We do not advertise to minors and never sell data. Public publishing by minors is gated at the database layer — an account without guardian age attestation cannot publish, enforced in SQL.
Guardian rights: you may review, export, or request deletion of the student profile at any time via the support email below. Deletion unpublishes all public content and anonymizes retained records; audit entries that must remain immutable are stripped of personal identity.
Data We Collect
- · Account information via Clerk (email, display name)
- · Platform usage (task records, points, badges)
- · Portfolio content (created and published by you)
- · Managed student profile data (collected with guardian consent, scope above)
- · Access logs (no personal identity; scrubbed before metric labels)
How Data Is Used
Only to provide platform features, compute points and levels, build growth archives, and prevent fraud. We never sell user data and never share it with third parties (except ecosystem voucher redemption you actively trigger).
Payment Processing
Payments are processed by Stripe. This site never touches or stores card data; we retain only order amount, status, and Stripe session identifiers for reconciliation and refunds. Refunds return via the original payment method.
Data Integrity
The points ledger, audit events, badge grants, portfolio versions and observation events are append-only at the database layer — UPDATE/DELETE is rejected by trigger. Growth records cannot be rewritten.
Contact
Privacy questions, including guardian review/export/deletion requests: [email protected]. We respond within 3 business days.